Toyota

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Toyota records in CISA KEV

No Toyota vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Display Control Unit 1 record MEDIUM Global Techstream 1 record LOW Rav4 Firmware 1 record LOW

Records

3 records

TI-2020-04521 CVE-2020-5551 · GHSA-5c48-qxrh-hrpg

Incorrect default permissions in TOYOTA MOTOR CORPORATION DCU

MEDIUM 41

Toyota 2017 Model Year DCU (Display Control Unit) allows an unauthenticated attacker within Bluetooth range to cause a denial of service attack and/or execute an arbitrary command.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01397 Published 2020-03-30 No fix listed CWE-276

TI-2020-04579 CVE-2020-5610 · GHSA-w6gv-63rm-rv7h

Out-of-bounds write in TOYOTA MOTOR CORPORATION Global TechStream for TOYOTA dealers

LOW 37

Global TechStream (GTS) for TOYOTA dealers version 15.10.032 and earlier allows an attacker to cause a denial-of-service (DoS) condition and execute arbitrary code via unspecified vectors.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01369 Published 2020-07-30 No fix listed CWE-787

TI-2023-13779 CVE-2023-29389 · GHSA-3gqh-xgpm-cfvx

Toyota RAV4 2021 vehicles automatically trust messages from other ECUs on a CAN bus…

LOW 33

Toyota RAV4 2021 vehicles automatically trust messages from other ECUs on a CAN bus, which allows physically proximate attackers to drive a vehicle by accessing the control CAN bus after pulling the bumper away and reach…

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.0066 Published 2023-04-05 No fix listed CWE-74

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0